Passbolt
passbolt.comOpen-source, team-focused password manager from Luxembourg's Passbolt SA built on OpenPGP, with a free self-hosted Community Edition.
- Owner
- Passbolt SA
- Based in
- Luxembourg
- Founded
- Unknown
- Type
- Standalone app
- Free plan
- Yes
- Community Edition: free and open source, self-hosted, unlimited users
- Personal plan
- No paid plan
- Latest audit
- Cure53, 2026
- SCIM and Azure, public report
- On record
- No incidents found
- in our research
- Audited by Cure53 in 2026, report public
- All apps are open source
- You can run your own server
- Has a free plan
How Passbolt encrypts your vault
From Passbolt's security documentation, next to the other 22. Passbolt is outlined.
End-to-end encrypted
Encrypted on your device before it's stored (like 20 others)
Cipher: OpenPGP (AES-256-CFB with RSA/ECC keys)
Yes 21
Optional 1
No 1
Website addresses encrypted
Not documented (20 of 23 document it)
Encrypted with the v5 metadata format, depending on configuration; previously more readable.
Encrypted 19
Readable 1
Not documented 3
Item names encrypted
Not documented (18 of 23 document it)
Optionally encrypted with the v5 metadata format.
Encrypted 17
Readable 1
Not documented 5
Memory-hard password hashing
Not documented (16 of 23 document it)
Memory-hard 3
Not memory-hard 11
Not documented 7
Doesn't apply 2
Extra secret key
Not documented (19 of 23 document it)
Each user's OpenPGP private key is generated client-side and protected by the passphrase.
Yes 1
No 14
Not documented 4
Doesn't apply 4
What you'll pay
In USD, from Passbolt's own pricing page, checked 2026-10-16.
Free plan
Yes
Community Edition: free and open source, self-hosted, unlimited users
Personal plan
None
After the first year
—
Family plan
None
- Business:
- $4.90/user/mo
- Free trial:
- 7 days
- Money-back:
- Unknown
- About the renewal:
- Paid plans are business only; renewal terms not stated.
Audits
Independent security reviews, newest first.
2026 Cure53
Scope: SCIM and Azure. Report is public.
- Passbolt blog: three security and compliance audits
- Research summary (no single link)
2025 Cure53
Scope: browser extension and API. Report is public.
- Research summary (no single link)
2021 Cure53
Scope: white-paper review. Report is public.
- Research summary (no single link)
- Open-source appsAll appsAll apps
- Open-source serverYesYes
- Run it yourselfOwn serverOwn server
- Bug bountyYesYes
Certifications: SOC 2 Type 2
Incidents
Breaches, stolen data and serious flaws on record.
None found in our research. Apps, browsers and passkeys
- WindowsNot verifiedNot verified
- macOSNot verifiedNot verified
- LinuxNot verifiedNot verified
- iPhoneYesYes
- AndroidYesYes
- Web vaultYesYes
- ChromeYesYes
- FirefoxYesYes
- SafariNoNo
- EdgeYesYes
- Saves and fills passkeysNot verifiedNot verified
- Unlock the vault with a passkeyNot verifiedNot verified
- Passkey import and export (CXP)Not verifiedNot verified
Sharing, recovery and extras
- Shared vaultsYesYes
- Share with non-usersNot verifiedNot verified
- Emergency accessNot verifiedNot verified
- 2FA codes built inYesYes
- Breach monitoringNot verifiedNot verified
- Email aliasesNot verifiedNot verified
- File attachmentsNot verifiedNot verified
- SSH keys and agentNot verifiedNot verified
- Command lineYesYes
- Encrypted exportNot verifiedNot verified
- Works offlineNot verifiedNot verified
- Authenticator-app 2FANot verifiedNot verified
- Security key for 2FAYesYes
- Password health reportNot verifiedNot verified
- CSV exportNot verifiedNot verified
Where it's a pick
Compare Passbolt with
All sources for Passbolt (12)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Passbolt securityVendor, checked 2026-10-16
- Passbolt Pro security white paper v5.10 (March 2026)Vendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Passbolt docs: how Passbolt secures your dataVendor, checked 2026-10-16
- Passbolt API on GitHubSource code, checked 2026-10-16
- Passbolt blog: three security and compliance auditsAudit, checked 2026-10-16
- Passbolt Cloud pricingVendor, checked 2026-10-16
- Passbolt Pro pricingVendor, checked 2026-10-16
- PassboltVendor, checked 2026-10-16
- Passbolt downloadsVendor, checked 2026-10-16
- Passbolt docs: what is PassboltVendor, checked 2026-10-16